What is Registry?
A registry is the organization that operates a top-level domain (TLD) and maintains the authoritative database of all domain names registered under that TLD.
In the Domain Name System (DNS), a registry is the entity responsible for operating a specific top-level domain (TLD), such as .com, .org, or .uk. The registry maintains the master database of every domain name registered under that TLD, along with the nameservers and registrar information associated with each domain. This database is the single source of truth for the TLD's zone file, which is published to the internet's root servers and other DNS resolvers.
The registry does not sell domain names directly to end users. Instead, it works through accredited registrars, which are companies like GoDaddy or Namecheap that handle customer-facing registration, billing, and support. When a registrar sells a domain, it sends a registration request to the registry via the Extensible Provisioning Protocol (EPP, defined in RFC 5730). The registry validates the request, checks for uniqueness, and inserts the domain into its database. The registry also handles renewals, transfers, and deletions, and it enforces policies set by the TLD's operator or by ICANN for generic TLDs (gTLDs).
The registry is a critical component of the DNS hierarchy. It sits between the root zone (which delegates authority to each TLD) and the registrars that serve domain owners. Without the registry, there would be no central, authoritative record of who owns what domain under a given TLD. Examples of well-known registries include Verisign (operator of .com and .net), the Public Interest Registry (.org), and Nominet (.uk).
Key facts
- A registry operates a single TLD and maintains its authoritative domain database.
- Registries do not sell domains directly; they work through accredited registrars.
- The registry publishes the TLD zone file to the root servers and DNS resolvers.
- Registries use the Extensible Provisioning Protocol (EPP, RFC 5730) to communicate with registrars.
- ICANN oversees registries for generic TLDs (gTLDs) under contractual agreements.
How it works in practice
Related terms
References
More in Domains
Auth Code
A unique, per-domain secret code that the losing (current) registrar must provide so the gaining (new) registrar can authorize a domain transfer.
ccTLD
A ccTLD is a two-letter top-level domain assigned to a country or territory based on the ISO 3166-1 alpha-2 code, such as .us for the United States or .jp for Japan.
Domain Lock
A registrar-level status that prevents unauthorized domain transfers, modifications, or deletions until the registrant explicitly removes the lock.
Domain Privacy
An optional service that replaces the domain registrant's personal contact information in WHOIS records with the registrar's proxy details to shield the owner from spam and unwanted disclosure.
EPP
EPP (Extensible Provisioning Protocol) is an XML-based application protocol used by domain name registries and registrars to provision domain names, manage contacts, and transfer registrations.
Grace Period
The grace period is a window after a domain expires during which the registrant can renew at the standard renewal fee, without incurring additional redemption costs.
IDN
An Internationalized Domain Name (IDN) is a domain name that includes characters outside the ASCII set, encoded as Punycode for compatibility with the DNS.
Punycode
Punycode is a method defined in RFC 3492 for converting Unicode strings into ASCII labels, enabling Internationalized Domain Names (IDNs) to be used in the DNS.
RDAP
RDAP (Registration Data Access Protocol) is a modern RESTful protocol for querying domain name and IP address registration data, replacing the older WHOIS protocol with structured JSON responses and role-based access controls.
Registrant
The registrant is the legal holder of a domain name, listed as the owner in the registry database and responsible for the domain's renewal and administration.